c860f510cb
In order to satisfy the requirement that port MAC addresses are unique only within a Neutron network, the ingress side flow for mirroring traffic needs to match both the VLAN id of the network and the MAC address of the port. However, the current implementation of this logic doesn't work correctly because of the way in which OVS handles VLANs and Neutron's use of the NORMAL action in br-int. As a temporary workaround, the VLAN related check is being disabled. The broad/multi-cast ingress flow is also being disabled because it too relies on a VLAN id check. When a reliable way to implement the VLAN id check is available this logic will be restored. Change-Id: I4a6c518baf568c5638eafbbae7495a66c113e515 Depends-On: Ie6b3811e41a94721679c9178cdd5119bdad8208d Related-Bug: 1529595
Tap as a Service
Tap-as-a-Service (TaaS) is an extension to the OpenStack network service (Neutron). It provides remote port mirroring capability for tenant virtual networks.
Port mirroring involves sending a copy of packets entering and/or leaving one port to another port, which is usually different from the original destinations of the packets being mirrored.
This service has been primarily designed to help tenants (or the cloud administrator) debug complex virtual networks and gain visibility into their VMs, by monitoring the network traffic associated with them. TaaS honors tenant boundaries and its mirror sessions are capable of spanning across multiple compute and network nodes. It serves as an essential infrastructure component that can be utilized for supplying data to a variety of network analytics and security applications (e.g. IDS).
- Free software: Apache license
- API Reference: https://github.com/openstack/tap-as-a-service/blob/master/API_REFERENCE.rst
- Source: https://git.openstack.org/cgit/openstack/tap-as-a-service
- Bugs: https://bugs.launchpad.net/tap-as-a-service
For installing Tap-as-a-Service with Devstack please read the INSTALL.rst file